OpenJDK 17.0.6 Released

Andrew Hughes gnu.andrew at
Fri Jan 27 01:04:12 UTC 2023

We are pleased to announce the release of OpenJDK 17.0.6.

The source tarball is available from:


The tarball is accompanied by a digital signature available at:


This is signed by our Red Hat OpenJDK key (openjdk at

PGP Key: rsa4096/0x92EF8D39DC13168F (hkp://
Fingerprint = CA5F 11C6 CE22 644D 42C6  AC44 92EF 8D39 DC13 168F

SHA256 checksums:

9630bb208e839f38f30de670b6cb778afaa9eedd7adab4aef37068715ce805a4  openjdk-17.0.6+10.tar.xz
59173d4f99d3520c8b81cb4a0f07f6d0cb21cf4aea8637ddd258c88f1fc41d4c  openjdk-17.0.6+10.tar.xz.sig

The checksums can be downloaded from:


New in release OpenJDK 17.0.6 (2023-01-17):
Live versions of these release notes can be found at:

* CVEs
  - CVE-2023-21835
  - CVE-2023-21843
* Security fixes
  - JDK-8286070: Improve UTF8 representation
  - JDK-8286496: Improve Thread labels
  - JDK-8287411: Enhance DTLS performance
  - JDK-8288516: Enhance font creation
  - JDK-8289350: Better media supports
  - JDK-8293554: Enhanced DH Key Exchanges
  - JDK-8293598: Enhance InetAddress address handling
  - JDK-8293717: Objective view of ObjectView
  - JDK-8293734: Improve BMP image handling
  - JDK-8293742: Better Banking of Sounds
  - JDK-8295687: Better BMP bounds
* Other changes
  - JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/ fails in Windows
  - JDK-7001973: java/awt/Graphics2D/ fails
  - JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/Receiver/ fails
  - JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/ fails
  - JDK-8029633: Raw inner class constructor ref should not perform diamond inference
  - JDK-8030121: java/awt/dnd/MissingDragExitEventTest/ fails
  - JDK-8065422: Trailing dot in hostname causes TLS handshake to fail with SNI disabled
  - JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/ fails
  - JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
  - JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
  - JDK-8178698: javax/sound/midi/Sequencer/ failed with timeout
  - JDK-8202836: [macosx] test java/awt/Graphics/ fails
  - JDK-8210558: serviceability/sa/ fails to find '^\s+- waiting to lock <0x[0-9a-f]+> \(a java\.lang\.Class ...'
  - JDK-8222323: fails with "RuntimeException: Failed to unset alwaysOnTop"
  - JDK-8233557: [TESTBUG] fails on macOs
  - JDK-8233558: [TESTBUG] fails on macos
  - JDK-8233648: [TESTBUG] failing on macos
  - JDK-8244670: convert clhsdb "whatis" command from javascript to java
  - JDK-8251466: test/java/io/File/ fails on Windows with mapped network drives.
  - JDK-8255439: System Tray icons get corrupted when Windows scaling changes
  - JDK-8256811: Delayed/missed jdwp class unloading events
  - JDK-8257722: Improve "keytool -printcert -jarfile" output
  - JDK-8262721: Add Tests to verify single iteration loops are properly optimized
  - JDK-8265489: Stress test times out because of long ObjectSynchronizer::monitors_iterate(...) operation
  - JDK-8266082: AssertionError in Annotate.fromAnnotations with -Xdoclint
  - JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
  - JDK-8267138: Stray suffix when starting gtests via
  - JDK-8268033: compiler/intrinsics/bmi/verifycode/ fails with "fatal error: Not compilable at tier 3: CodeBuffer overflow"
  - JDK-8268276: Base64 Decoding optimization for x86 using AVX-512
  - JDK-8268297: jdk/jfr/api/consumer/streaming/ times out
  - JDK-8268779: ZGC: runtime/InternalApi/ failed with "OutOfMemoryError: Java heap space"
  - JDK-8269029: compiler/codegen/ fails for client VMs
  - JDK-8269404: Base64 Encoding optimization enhancements for x86 using AVX-512
  - JDK-8269571: NMT should print total malloc bytes and invocation count
  - JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/stress/jni/nativeAndMH/ crash with small heap (-Xmx50m)
  - JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using the condy helper methods in the interpreter
  - JDK-8270155: ARM32: Improve register dump in hs_err
  - JDK-8270609: [TESTBUG] java/awt/print/Dialog/ does not show instruction
  - JDK-8270848: Redundant unsafe opmask register allocation in some instruction patterns.
  - JDK-8270947: AArch64: C1: use zero_words to initialize all objects
  - JDK-8271015: Split cds/ test into smaller parts
  - JDK-8271834: TestStringDeduplicationAgeThreshold intermittent failures on Shenandoah
  - JDK-8271956: AArch64: C1 build failed after JDK-8270947
  - JDK-8272094: compiler/codecache/ crashes with "failed to allocate space for trampoline"
  - JDK-8272123: Problem list 4 jtreg tests which regularly fail on macos-aarch64
  - JDK-8272608: java_lang_System::allow_security_manager() doesn't set its initialization flag
  - JDK-8272776: NullPointerException not reported
  - JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after 8270947
  - JDK-8272809: JFR thread sampler SI_KERNEL SEGV in metaspace::VirtualSpaceList::contains
  - JDK-8273043: [TEST_BUG] Automate
  - JDK-8273108: RunThese24H crashes with SEGV in markWord::displaced_mark_helper() after JDK-8268276
  - JDK-8273236: keytool does not accurately warn about algorithms that are disabled but have additional constraints
  - JDK-8273380: ARM32: Default to {ldrexd,strexd} in StubRoutines::atomic_{load|store}_long
  - JDK-8273459: Update code segment alignment to 64 bytes
  - JDK-8273497: should link to both md and html
  - JDK-8273553: also has similar error of JDK-8253368
  - JDK-8273578: javax/swing/JMenu/4515762/ fails on macOS 12
  - JDK-8273685: Remove jtreg tag manual=yesno for  java/awt/Graphics/ & show test instruction
  - JDK-8273880: Zero: Print warnings when unsupported intrinsics are enabled
  - JDK-8273881: Metaspace: test repeated deallocations
  - JDK-8274029: Remove jtreg tag manual=yesno for  java/awt/print/Dialog/
  - JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/PrinterJob/ImagePrinting/ & show test UI
  - JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/ delay is too high
  - JDK-8274296: Update or Problem List tests which may fail with uiScale=2 on macOS
  - JDK-8274456: Remove jtreg tag manual=yesno  java/awt/print/PrinterJob/
  - JDK-8274527: Minimal VM build fails after JDK-8273459
  - JDK-8274563: jfr/event/oldobject/ fails when GC cycles are not happening
  - JDK-8274903: Zero: Support AsyncGetCallTrace
  - JDK-8275170: Some jtreg sound tests should be marked with sound keyword
  - JDK-8275234: java/awt/GraphicsDevice/DisplayModes/ is entered twice in ProblemList
  - JDK-8275535: Retrying a failed authentication on multiple LDAP servers can lead to users blocked
  - JDK-8275569: Add linux-aarch64 to test-make profiles
  - JDK-8276108: Wrong instruction generation in aarch64 backend
  - JDK-8276904: Optional.toString() is unnecessarily expensive
  - JDK-8277092: fails with "RuntimeException: Committed seems high: NNNN expected at most MMMM"
  - JDK-8277346: ProblemList 7 serviceability/sa tests on macosx-x64
  - JDK-8277351: ProblemList runtime/jni/checked/ on macosx-x64
  - JDK-8277358: Accelerate CRC32-C
  - JDK-8277411: C2 fast_unlock intrinsic on AArch64 has unnecessary ownership check
  - JDK-8277576: ProblemList runtime/ErrorHandling/ on macosx-X64
  - JDK-8277577: ProblemList compiler/onSpinWait/ on linux-aarch64
  - JDK-8277578: ProblemList applications/jcstress/ on linux-aarch64
  - JDK-8277866: gc/epsilon/ failed with wrong initial heap size
  - JDK-8277881: Missing SessionID in TLS1.3 resumption in compatibility mode
  - JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
  - JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/ fails with "tag mismatch"
  - JDK-8278826: Print error if Shenandoah flags are empty (instead of crashing)
  - JDK-8279066: entries.remove(entry) is useless in PKCS12KeyStore
  - JDK-8279398: jdk/jfr/api/recording/time/ failed with "RuntimeException: getStopTime() > afterStop"
  - JDK-8279536: jdk/nio/zipfs/ timed out
  - JDK-8279662: serviceability/sa/ can fail due to unexpected GC
  - JDK-8279941: sun/security/pkcs11/Signature/ fails when NSS version detection fails
  - JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on large machines
  - JDK-8280124: Reduce branches decoding latin-1 chars from UTF-8 encoded bytes
  - JDK-8280234: AArch64 "core" variant does not build after JDK-8270947
  - JDK-8280391: NMT: Correct NMT tag on CollectedHeap
  - JDK-8280511: AArch64: Combine shift and negate to a single instruction
  - JDK-8280554: resourcehogs/serviceability/sa/ can fail if GC is triggered
  - JDK-8280555: serviceability/sa/ is failing due to ObjectMonitor referencing a null Object
  - JDK-8280872: Reorder code cache segments to improve code density
  - JDK-8280890: Cannot use '-Djava.system.class.loader' with class loader in signed JAR
  - JDK-8280948: Write a regression test for JDK-4659800
  - JDK-8281296: Create a regression test for JDK-4515999
  - JDK-8281744: x86: Use short jumps in TIG::set_vtos_entry_points
  - JDK-8282049: AArch64: Use ZR for integer zero immediate volatile stores
  - JDK-8282276: Problem list failing two Robot Screen Capture tests
  - JDK-8282347: AARCH64: Untaken branch in has_negatives stub
  - JDK-8282398: test fails because SSL cert expired
  - JDK-8282402: Create a regression test for JDK-4666101
  - JDK-8282511: Use fixed certificate validation date in SSLExampleCert template
  - JDK-8282528: AArch64: Incorrect replicate2L_zero rule
  - JDK-8282600: SSLSocketImpl should not use user_canceled workaround when not necessary
  - JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/ fails intermittently with exit code 1
  - JDK-8282730: LdapLoginModule throw NPE from logout method after login failure
  - JDK-8282777: Create a Regression test for JDK-4515031
  - JDK-8282857: Create a regression test for JDK-4702690
  - JDK-8283059: Uninitialized warning in check_code.c with GCC 11.2
  - JDK-8283199: Linux os::cpu_microcode_revision() stalls cold startup
  - JDK-8283298: Make CodeCacheSegmentSize a product flag
  - JDK-8283337: Posix signal handler modification warning triggering incorrectly
  - JDK-8283353: compiler/c2/cr6865031/ and compiler/runtime/ fails on x86_32
  - JDK-8283383: [macos] a11y : Screen magnifier shows extra characters (0) at the end JButton accessibility name
  - JDK-8283999: Update JMH devkit to 1.35
  - JDK-8284533: Improve InterpreterCodelet data footprint
  - JDK-8284681: compiler/c2/aarch64/ fails with "RuntimeException: for CodeHeap < 250MB the far jump is expected to be encoded with a single branch instruction"
  - JDK-8284690: [macos] VoiceOver : Getting java.lang.IllegalArgumentException: Invalid location on Editable JComboBox
  - JDK-8284732: FFI_GO_CLOSURES macro not defined but required for zero build on Mac OS X
  - JDK-8284752: Zero does not build on Mac OS X due to missing os::current_thread_enable_wx implementation
  - JDK-8284771: java/util/zip/ failed with "AssertionError: Expected IOException to be thrown, but nothing was thrown"
  - JDK-8284892: java/net/httpclient/http2/ fails intermittently
  - JDK-8284980: Test vmTestbase/nsk/stress/except/ times out with -Xcomp  -XX:+DeoptimizeALot
  - JDK-8285093: Introduce UTIL_ARG_WITH
  - JDK-8285305: Create an automated test for JDK-4495286
  - JDK-8285373: Create an automated test for JDK-4702233
  - JDK-8285604: closed sun/java2d/GdiRendering/ failed with "Incorrect color ffeeeeee instead of ff0000ff in pixel (100, 100)"
  - JDK-8285612: Remove jtreg tag manual=yesno for java/awt/print/PrinterJob/ImagePrinting/
  - JDK-8285687: Remove jtreg tag manual=yesno for java/awt/print/PrinterJob/
  - JDK-8285698: Create a test to check the focus stealing of JPopupMenu from JComboBox
  - JDK-8285794: AsyncGetCallTrace might acquire a lock via JavaThread::thread_from_jni_environment
  - JDK-8285836: sun/net/www/http/KeepAliveCache/ failed with "RuntimeException: Failed in server"
  - JDK-8286172: Create an automated test for JDK-4516019
  - JDK-8286263: compiler/c1/ failed with "RuntimeException: testCurrentTimeMillis failed with -3"
  - JDK-8286313: [macos] Voice over reads the boolean value as null in the JTable
  - JDK-8286452: The array length of testSmallConstArray should be small and const
  - JDK-8286460: Remove dependence on JAR filename in CDS tests
  - JDK-8286551: JDK-8286460 causes tests to fail to compile in Tier2
  - JDK-8286624: Regression Test fails on OL8.3
  - JDK-8286663: Resolve IDE warnings in WTrayIconPeer and SystemTray
  - JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/DropTargetInInternalFrameTest.html times out and fails in Windows
  - JDK-8286872: Refactor add/modify notification icon (TrayIcon)
  - JDK-8287011: Improve container information
  - JDK-8287076: Document.normalizeDocument() produces different results
  - JDK-8287349: AArch64: Merge LDR instructions to improve C1 OSR performance
  - JDK-8287425: Remove unnecessary register push for MacroAssembler::check_klass_subtype_slow_path
  - JDK-8287609: macOS: SIGSEGV at [CoreFoundation] CFArrayGetCount / sun.font.CFont.getTableBytesNative
  - JDK-8287740: NSAccessibilityShowMenuAction not working for text editors
  - JDK-8287826: javax/accessibility/4702233/ fails to compile
  - JDK-8288132: Update test artifacts in QuoVadis CA interop tests
  - JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit compiling xerces
  - JDK-8288377: [REDO] DST not applying properly with zone id offset set with TZ env variable
  - JDK-8288445: AArch64: C2 compilation fails with guarantee(!true || (true && (shift != 0))) failed: impossible encoding
  - JDK-8288651: CDS test should not use literal string as ClassLoader name
  - JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata type support
  - JDK-8289146: containers/docker/ fails on linux ppc64le machine with missing Memory and Swap Limit output
  - JDK-8289257: Some custom loader tests failed due to symbol refcount not decremented
  - JDK-8289301: P11Cipher should not throw out of bounds exception during padding
  - JDK-8289524: Add JFR JIT restart event
  - JDK-8289559: java/awt/a11y/ test fails with java.lang.NullPointerException
  - JDK-8289562: Change and URL's to https
  - JDK-8290207: Missing notice in
  - JDK-8290209: missing additional text
  - JDK-8290374: Shenandoah: Remove inaccurate comment on SBS::load_reference_barrier()
  - JDK-8290451: Incorrect result when switching to C2 OSR compilation from C1
  - JDK-8290529: C2: assert(BoolTest(btest).is_canonical()) failure
  - JDK-8290532: Adjust PKCS11Exception and handle more PKCS11 error codes
  - JDK-8290687: serviceability/sa/ could leave files owned by root on macOS
  - JDK-8290705: StringConcat::validate_mem_flow asserts with "unexpected user: StoreI"
  - JDK-8290711: assert(false) failed: infinite loop in PhaseIterGVN::optimize
  - JDK-8290781: Segfault at PhaseIdealLoop::clone_loop_handle_data_uses
  - JDK-8290839: jdk/jfr/event/compiler/ failed with "RuntimeException: No JIT restart event found: expected true, was false"
  - JDK-8290908: misc tests fail: assert(!thread->owns_locks()) failed: must release all locks when leaving VM
  - JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is false
  - JDK-8291456: com/sun/jdi/ failed with: Wrong number of class unload events: expected 10 got 4
  - JDK-8291459: JVM crash with GenerateOopMap::error_work(char const*, __va_list_tag*)
  - JDK-8291599: Assertion in PhaseIdealLoop::skeleton_predicate_has_opaque after JDK-8289127
  - JDK-8291650: Add delay to ClassUnloadEventTest before exiting to give time for JVM to send all events before VMDeath
  - JDK-8291775: C2: assert(r != __null && r->is_Region()) failed: this phi must have a region
  - JDK-8292083: Detected container memory limit may exceed physical machine memory
  - JDK-8292158: AES-CTR cipher state corruption with AVX-512
  - JDK-8292385: assert(ctrl == kit.control()) failed: Control flow was added although the intrinsic bailed out
  - JDK-8292541: [Metrics] Reported memory limit may exceed physical machine memory
  - JDK-8292586: simplify cleanups in NTLMAuthSequence getCredentialsHandle
  - JDK-8292682: Code change of JDK-8282730 not updated to reflect CSR update
  - JDK-8292695: SIGQUIT and jcmd attaching mechanism does not work with signal chaining library
  - JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString wrong placing of free
  - JDK-8292816: GPL Classpath exception missing from assemblyprefix.h
  - JDK-8292866: Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check MultiByteToWideChar return value for failures
  - JDK-8292879: com/sun/jdi/ failed due to classes not unloading
  - JDK-8292880: Improve debuggee logging for com/sun/jdi/
  - JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
  - JDK-8292899: testcase failed on AIX platform
  - JDK-8292903: enhance round_up_power_of_2 assertion output
  - JDK-8293010: JDI ObjectReference/referringObjects/referringObjects001 fails: assert(env->is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed: checking
  - JDK-8293044: C1: Missing access check on non-accessible class
  - JDK-8293232: Fix race condition in pkcs11 SessionManager
  - JDK-8293319: [C2 cleanup] Remove unused other_path arg in Parse::adjust_map_after_if
  - JDK-8293472: Incorrect container resource limit detection if manual cgroup fs mounts present
  - JDK-8293489: Accept CAs with BasicConstraints without pathLenConstraint
  - JDK-8293535: jdk/javadoc/doclet/testJavaFX/ fail with jfx
  - JDK-8293540: [Metrics] Incorrectly detected resource limits with additional cgroup fs mounts
  - JDK-8293550: Optionally add get-task-allow entitlement to macos binaries
  - JDK-8293578: Duplicate ldc generated by javac
  - JDK-8293657: sun/management/jmxremote/bootstrap/ failed with "SSLHandshakeException: Remote host terminated the handshake"
  - JDK-8293659: Improve UnsatisfiedLinkError error message to include dlopen error details
  - JDK-8293672: Update freetype md file
  - JDK-8293701: jdeps InverseDepsAnalyzer runs into NoSuchElementException: No value present
  - JDK-8293808: mscapi destroyKeyContainer enhance KeyStoreException: Access is denied exception
  - JDK-8293815: P11PSSSignature.engineUpdate should not print debug messages during normal operation
  - JDK-8293816: CI: ciBytecodeStream::get_klass() is not consistent
  - JDK-8293826: Closed test fails after JDK-8276108 on aarch64
  - JDK-8293828: JFR: jfr/event/oldobject/ still fails when GC cycles are not happening
  - JDK-8293834: Update CLDR data following tzdata 2022c update
  - JDK-8293891: gc/g1/mixedgc/ (still) assumes that GCs take 1ms minimum
  - JDK-8293965: Code signing warnings after JDK-8293550
  - JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr) failed: must have PC
  - JDK-8294307: ISO 4217 Amendment 173 Update
  - JDK-8294310: fails on macos after JDK-8293550
  - JDK-8294357: (tz) Update Timezone Data to 2022d
  - JDK-8294578: [PPC64] C2: Missing is_oop information when using disjoint compressed oops mode
  - JDK-8294740: Add cgroups keyword to
  - JDK-8294837: unify Windows 2019 version check in os_windows and java_props_md
  - JDK-8294840: langtools use File.pathSeparator
  - JDK-8295173: (tz) Update Timezone Data to 2022e
  - JDK-8295288: Some vm_flags tests associate with a wrong BugID
  - JDK-8295405: Add cause in a couple of IllegalArgumentException and InvalidParameterException shown by sun/security/pkcs11 tests
  - JDK-8295412: support latest VS2022 MSC_VER in abstract_vm_version.cpp
  - JDK-8295419: JFR: Change name of jdk.JitRestart
  - JDK-8295429: Update harfbuzz md file
  - JDK-8295469: S390X: Optimized builds are broken
  - JDK-8295554: Move the "sizecalc.h" to the correct location
  - JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
  - JDK-8295714: GHA ::set-output is deprecated and will be removed
  - JDK-8295723: security/infra/wycheproof/ fails with Assertion Error
  - JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr check before frame constructor
  - JDK-8295952: Problemlist existing compiler/rtm tests also on x86
  - JDK-8296083: javax/swing/JTree/6263446/ fails intermittently on a VM
  - JDK-8296108: (tz) Update Timezone Data to 2022f
  - JDK-8296239: ISO 4217 Amendment 174 Update
  - JDK-8296480: java/security/cert/pkix/policyChanges/ is failing
  - JDK-8296485: test fails with SunCertPathBuilderException
  - JDK-8296496: Overzealous check in sizecalc.h prevents large memory allocation
  - JDK-8296632: Write a test to verify the content change of TextArea sends TextEvent
  - JDK-8296715: CLDR v42 update for tzdata 2022f
  - JDK-8296733: JFR: File Read event for RandomAccessFile::write(byte[]) is incorrect
  - JDK-8296945: PublicMethodsTest is slow due to dependency verification with debug builds
  - JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex returns wrong value
  - JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
  - JDK-8296958: [JVMCI] add API for retrieving ConstantValue attributes
  - JDK-8296960: [JVMCI] list HotSpotConstantPool.loadReferencedType to ConstantPool
  - JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field for ResolvedJavaMethod/ResolvedJavaField
  - JDK-8296967: [JVMCI] rationalize relationship between getCodeSize and getCode in ResolvedJavaMethod
  - JDK-8297147: UnexpectedSourceImageSize test times out on slow machines when fastdebug is used
  - JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/ fails again
  - JDK-8297241: Update sun/java2d/DirectX/OnScreenRenderingResizeTest/
  - JDK-8297309: Memory leak in ShenandoahFullGC
  - JDK-8297481: Create a regression test for JDK-4424517
  - JDK-8297530: java.lang.IllegalArgumentException: Negative length on strings concatenation
  - JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not run
  - JDK-8297656: AArch64: Enable AES/GCM Intrinsics
  - JDK-8297804: (tz) Update Timezone Data to 2022g
  - JDK-8299392: [17u] Remove designator DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
  - JDK-8299439: java/text/Format/NumberFormat/ fails for hr_HR
  - JDK-8299483: ProblemList java/text/Format/NumberFormat/

Notes on individual issues:


JDK-8295687: Better BMP bounds
Loading a linked ICC profile within a BMP image is now disabled by
default. To re-enable it, set the new system property
`sun.imageio.bmp.enabledLinkedProfiles` to `true`.  This new property
replaces the old property,


JDK-8293742: Better Banking of Sounds
Previously, the SoundbankReader implementation,
``, would download a JAR
soundbank from a URL.  This behaviour is now disabled by default. To
re-enable it, set the new system property `jdk.sound.jarsoundbank` to


JDK-8282730: New Implementation Note for LoginModule on Removing Null from a Principals or Credentials Set
Back in OpenJDK 9, JDK-8015081 changed the Set implementation used to
hold principals and credentials so that it rejected null
values. Attempts to call add(null), contains(null) or remove(null)
were changed to throw a NullPointerException.

However, the logout() methods in the LoginModule implementations
within the JDK were not updated to check for null values, which may
occur in the event of a failed login. As a result, a logout() call may
throw a NullPointerException.

The LoginModule implementations have now been updated with such checks
and an implementation note added to the specification to suggest that
the same change is made in third party modules.  Developers of third
party modules are advised to verify that their logout() method does not
throw a NullPointerException.


JDK-8287411: Enhance DTLS performance
The JDK now exchanges DTLS cookies for all handshakes, new and
resumed. The previous behaviour can be re-enabled by setting the new
system property `jdk.tls.enableDtlsResumeCookie` to `false`.

Andrew :)
Pronouns: he / him or they / them
Senior Free Java Software Engineer
OpenJDK Package Owner
Red Hat, Inc. (

PGP Key: ed25519/0xCFDA0F9B35964222 (hkp://
Fingerprint = 5132 579D D154 0ED2 3E04  C5A0 CFDA 0F9B 3596 4222
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <>

More information about the jdk-updates-dev mailing list